Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-35539
6.1
MEDIUMCVSS v3
Published
April 3, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exists because of insufficient HTML attachment sanitization in preview mode. A victim must preview a text/html attachment.
GitHub